Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
File: YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json)
Hash identifier: v9+UWkEEtcBSpbqr7cQdlrujqBbo1y3ZjJPJgkdZcHM=
Subject key identifier: E9:7E:47:EB:1A:15:18:91:6E:EE:D7:72:1F:D6:7F:9F:83:8D:D7:11
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Certificate issuer: /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial: 019511346BFF1CD1718EF06B5078575B5B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 00:00:02 +0000
Manifest this update: Mon 17 Feb 2025 00:00:02 +0000
Manifest next update: Tue 18 Feb 2025 00:00:02 +0000
Files and hashes: 1: 6ZqvxOIku_49tBv2G-O9_p-5hVM.roa (hash: TYPoYRQa9KHLM0V6FPsrIT1zwnhyRnA4uELbenS3VGM=)
2: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: 85VMwku0M4e1KGuqakqWb9xtb35QEpfOujZb5snz1Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:6b:ff:1c:d1:71:8e:f0:6b:50:78:57:5b:5b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
Validity
Not Before: Feb 17 00:00:02 2025 GMT
Not After : Feb 18 00:00:02 2025 GMT
Subject: CN=e97e47eb1a1518916eeed7721fd67f9f838dd711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:79:bc:97:68:3e:1d:f8:ff:34:67:0f:02:c8:
a2:b8:f4:24:28:bc:a0:e7:ef:e3:45:83:8d:e8:88:
91:fb:06:d7:da:72:03:e6:e2:69:5c:87:0f:ee:2a:
49:35:3f:67:c0:01:16:4b:5c:59:85:53:66:56:b3:
9a:d2:47:0c:b2:3a:47:c7:71:0c:3d:e4:a4:55:9e:
0d:9a:74:85:e4:b1:ec:dc:d8:ab:9b:c7:fb:66:1d:
df:dc:93:52:0b:fd:6a:47:75:6b:bd:1c:4f:51:9e:
50:99:32:24:36:3c:82:a3:6c:73:57:e5:0e:f8:1e:
a2:75:9d:83:53:40:f2:36:85:84:05:df:c6:1f:80:
93:6c:89:ff:4c:ab:85:ed:50:25:bf:69:22:81:ed:
c6:fe:c4:de:27:40:9f:bc:61:72:51:0a:9a:92:c1:
7a:84:dd:53:30:90:f0:ac:6a:bb:7e:99:81:ae:d9:
b3:c0:0d:15:c1:71:86:bf:5e:8a:48:eb:69:24:0a:
b6:73:1e:60:a5:41:d4:8e:ea:df:c8:61:af:00:ad:
b7:4f:46:79:99:bb:81:f3:e3:ef:66:ba:a2:78:13:
14:6d:ad:8b:c5:3c:13:7f:89:02:eb:0e:5c:8b:37:
29:5e:e6:bb:f2:8b:e0:44:34:8c:d6:b5:73:73:c8:
1d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7E:47:EB:1A:15:18:91:6E:EE:D7:72:1F:D6:7F:9F:83:8D:D7:11
X509v3 Authority Key Identifier:
keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a8:e8:bd:87:df:e4:cf:b1:a6:73:9c:36:b0:6b:e6:7b:d2:
1b:d2:38:80:c1:5b:86:26:0e:f4:d1:bd:bb:57:cb:54:f4:21:
1c:28:f5:11:43:46:ae:97:7b:6c:c9:8a:5a:9b:d2:9d:49:07:
db:97:a5:7c:f7:fe:e2:9d:91:da:f4:74:80:3c:ae:72:43:b4:
8c:78:b9:ff:69:7c:5c:5c:e9:0b:ac:51:be:38:ec:cc:8f:40:
da:e4:ee:c7:1f:b2:d0:ac:7e:9d:38:41:04:5e:05:4e:48:83:
1d:34:60:fd:38:b1:42:ea:d6:da:cf:d6:e9:e8:42:6d:a8:41:
26:6c:cc:d7:1e:4d:e2:8d:e9:72:23:3c:cf:5d:54:41:44:92:
37:ba:f7:3f:b8:15:fe:2b:52:3f:56:78:dd:cc:35:91:ab:1e:
28:3a:fb:5f:1a:f0:73:c8:37:ab:1b:e9:0a:1a:6d:1f:99:72:
ad:8b:07:6b:6b:fe:cb:ab:09:b5:98:c6:27:f5:8b:59:bc:a8:
4d:d5:88:bd:29:84:a7:1c:82:62:f1:64:1c:a3:ec:76:23:be:
f0:47:ee:69:67:cd:64:7c:73:f2:ff:b3:91:f1:51:8d:19:2c:
c5:ac:91:9c:20:bd:b1:23:01:e5:a8:a3:ee:dd:1f:4c:b2:4a:
8f:a3:af:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:38 2025 by rpki-client